Skip to content
OpenAdvisories

Vendor

gtlwpdev

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.9

    All push notification for WP <= 1.5.3 - Authenticated (Administrator+) SQL Injection via 'delete_id' Parameter

    The All push notification for WP plugin for WordPress is vulnerable to time-based SQL Injection via the 'delete_id' parameter in all versions up to, and including, 1.5.3 due to insufficient escaping on the user supplied parameter and lack of sufficient prepar…